1cc1569fc7c364f752083b9d007f4595989fb31887e973b5a937bfb79e143169

Analysis

max time kernel
149s
max time network
151s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
17/08/2024, 14:33

Target

ZieprbLWxElxPq4I4Ayz7Nq2eNFmpvXTsw.elf
Size

84KB
MD5

e5618f91b5feb2589c3fe88f8f95452d
SHA1

4de27aaf32725176c25f216209d375866d521db0
SHA256

1cc1569fc7c364f752083b9d007f4595989fb31887e973b5a937bfb79e143169
SHA512

54ddb965da1bd3eff5ec00252605baa0466f64707d80142141cec1a60c35f7c88792891c084141b7336e121c3d91b2764291fbce3b0a7921a85b50a29a896c55
SSDEEP

1536:LXdiMnyAC333+3Pk+ojWq72OLN5E/mLes7DzHpBUrVwTfmtxX/X/LA7MpzX:LXdiMnyAkngPVx7OLN5E/m6s734VYm/R

Score

7^/10

rootkit

Loads a kernel module 4 IoCs

Loads a Linux kernel module, potentially to achieve persistence

pid	Process
2527	ZieprbLWxElxPq4I4Ayz7Nq2eNFmpvXTsw.elf
2527	ZieprbLWxElxPq4I4Ayz7Nq2eNFmpvXTsw.elf
2541	Process not Found
2541	Process not Found

/tmp/ZieprbLWxElxPq4I4Ayz7Nq2eNFmpvXTsw.elf
/tmp/ZieprbLWxElxPq4I4Ayz7Nq2eNFmpvXTsw.elf
1⤵
- Loads a kernel module
PID:2527